CLEANSTART-2026-HB04521 Security fix for CVE-2026-54272 applied in: langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r1, langfuse-worker 3.223.0-r2, langfuse-worker 3.224.0-r1, langfuse-worker 3.224.1-r1, langfuse-worker 3.224.2-r1, langfuse-worker 3.224.4-r1, langfuse-worker 3.225.0-r1, langfuse-worker 4.0.0-r1, langfuse-worker 4.3.0-r1, langfuse-worker 4.3.1-r1, n8n 2.28.0-r2, npm 11.17.0-r2, npm 11.18.0-r2, proxy-agent 6.4.0-r0, proxy-agent 6.5.0-r1, proxy-agent 7.0.0-r2, proxy-agent 8.0.2-r1, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-54272 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EG71215 Security fix for CVE-2026-13149 applied in: apache-superset 6.0.0-r6, argo-workflows 3.6.19-r7, npm 11.17.0-r2, npm 11.18.0-r0, pulumi 3.248.0-r0, renovate 44.31.0-r1, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-13149 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VN19790 Security fix for CVE-2026-16728 applied in: langfuse 3.208.0-r1, langfuse 3.213.0-r1, langfuse 3.225.0-r1, langfuse 4.2.0-r1, langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r1, langfuse-worker 3.223.0-r2, langfuse-worker 3.224.0-r1, langfuse-worker 3.224.1-r1, langfuse-worker 3.224.2-r1, langfuse-worker 3.224.4-r1, langfuse-worker 3.225.0-r1, langfuse-worker 4.0.0-r1, langfuse-worker 4.3.0-r1, langfuse-worker 4.3.1-r1, n8n 2.28.0-r2, npm 11.17.0-r2, npm 11.18.0-r2, npm 11.18.0-r3, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-16728 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EG50639 Security fix for CVE-2026-73566 applied in: npm 11.17.0-r2

Security vulnerability affects the npm package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VA58773 Security fix for CVE-2026-85024 applied in: apache-superset 6.0.0-r7, npm 11.19.1-r0, npm 12.0.2-r0

CVE-2026-85024 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UI28348 Security fix for CVE-2026-18540 applied in: apache-superset 6.0.0-r7, npm 11.19.1-r0, npm 12.0.2-r0

CVE-2026-18540 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IQ27663 Security fix for CVE-2026-19534 applied in: apache-superset 6.0.0-r7, npm 11.19.1-r0, npm 12.0.2-r0

CVE-2026-19534 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

ROOT-APP-NPM-CVE-2024-56332 CVE-2024-56332 in next - Patched by Root

Root has patched CVE-2024-56332 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-14257 CVE-2026-14257 in brace-expansion - Patched by Root

Root has patched CVE-2026-14257 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-69152 CVE-2026-69152 in brace-expansion - Patched by Root

Root has patched CVE-2026-69152 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-13149 CVE-2026-13149 in brace-expansion - Patched by Root

Root has patched CVE-2026-13149 in the brace-expansion package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-39693 CVE-2024-39693 in next - Patched by Root

Root has patched CVE-2024-39693 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2024-34350 CVE-2024-34350 in next - Patched by Root

Root has patched CVE-2024-34350 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2025-48068 CVE-2025-48068 in next - Patched by Root

Root has patched CVE-2025-48068 in the next package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2022-23646 CVE-2022-23646 in next - Patched by Root

Root has patched CVE-2022-23646 in the next package for Root:npm. Multiple fixed versions available...

scanner-cli

Deprecation Notice: Hawkeye has reached its end of life. There are more modern options out there for you and your project. If you wish to pick up maintenance of the project, please feel free to contact me. You'll find means of reaching out to me on my personal homepage. . . . . . . The Hawkeye...

aura

Este repositorio se ha trasladado a una nueva ubicación: https://github.com/SourceCode-AI/aura Seguridad en auditoría e introspección de código Sobre el problema La tendencia actual en el desarrollo es utilizar muchos paquetes en la fase de desarrollo, incluso si proporcionan solo una funcionalid...

Malicious code in @lekzo/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5caafea4a5656343feb4b52bf0007c98e6ed65a41ad22c79f24c0f1c48566f package.json declares the libsignal dependency as github:canove/libsignal-node — a bare GitHub owner/repo reference with no commit SHA, tag, or semve...

MAL-2026-16276 Malicious code in @lekzo/baileys (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da5caafea4a5656343feb4b52bf0007c98e6ed65a41ad22c79f24c0f1c48566f package.json declares the libsignal dependency as github:canove/libsignal-node — a bare GitHub owner/repo reference with no commit SHA, tag, or semve...

Linux Distros Unpatched Vulnerability : CVE-2026-92595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer npm package nodemailer versions 9.1.0 and earlier do not honor the disableFileAccess and disableUrlAccess sandbox options when message content is...